Every 2026 Incident
| Disclosed | Company | Third party | What was exposed | Source |
|---|---|---|---|---|
| Nov 8, 2026 | Notion | Fireworks AI | Notion AI chat transcripts used for its Insights feature, from fewer than 1% of workspaces Chats carried no user or workspace labels and no tool call results. Notion turned off Insights and stopped using Fireworks. | Company notice |
Read the full story: Notion AI Chats Exposed in Fireworks AI Breach. More in Security news.
What to Do When a Vendor Has an Incident
- Read the vendor's notice and check whether your account was contacted.
- Rotate any passwords, API keys or tokens that could have been in the exposed data.
- Ask for the vendor's sub-processor list, so you know which third parties hold your data.
- Put security terms on the agenda for your next software renewal.
Methodology and Limits
- We list an incident only when the vendor or a regulator has confirmed it in writing, and every row links that source.
- Only companies we track are included. The date is when the vendor confirmed the incident.
- "What was exposed" uses the vendor's own words, shortened. We don't guess scope or blame.
- A nightly check finds new notices; each one is reviewed before it is added.
More in our Methodology. Missing an incident or spot a mistake? Tell us.
Common Questions
What counts as a security incident here?
A breach or data exposure that the vendor itself or a regulator has confirmed in writing. Rumors, social posts and unconfirmed claims are left out.
Why list third-party vendors?
Many incidents now start at a supplier, such as an AI model host. Naming the third party shows where your data actually went.
Does an incident mean I should switch tools?
Not by itself. Look at how the vendor responded: how fast it disclosed, what it shut off and what it told customers to do.
How often is this updated?
A nightly check looks for new notices at the companies we track. Each find is reviewed before it is added.
Cite this tracker
HissingKitty, Software Security Incidents 2026, updated Nov 8, 2026, https://hissingkitty.com/research/software-breaches-2026